$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e21594f0-8c43-3019-b67e-05291f512ad8.roa File: e21594f0-8c43-3019-b67e-05291f512ad8.roa (raw, json) Hash identifier: af05FAaAj9XFXF/UeHRIdax7D2Krv5XnB4A0H4IzKVQ= Subject key identifier: 32:C3:30:38:5D:2E:03:55:1A:EF:C8:E0:E9:65:A6:2F:85:FE:B6:11 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816BBC11FD16C9D7F75440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e21594f0-8c43-3019-b67e-05291f512ad8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6b:bc:11:fd:16:c9:d7:f7:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2d898a2c-adf5-4d8d-909a-8ce1abfc1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:b9:64:3a:09:4f:00:50:49:93:9e:b8:bb: fc:14:f3:53:a3:38:09:54:94:40:f5:37:b6:22:5d: 48:52:08:5b:e9:fb:06:33:5f:b8:04:fc:be:d9:c6: c4:9d:59:3e:26:ca:7a:97:04:16:bf:43:c9:86:2e: 55:ec:5d:0e:bc:05:1c:fb:8e:6c:98:ce:ad:67:61: e2:d0:89:2b:63:16:cc:6f:ac:60:13:19:6a:60:48: ea:46:10:b2:4e:17:e1:60:0e:80:42:49:73:d2:6d: 46:9c:26:27:ad:13:53:4b:92:22:47:24:4e:8f:5b: 99:99:81:8d:ea:05:e2:06:0f:90:e5:18:8a:9f:b0: 34:38:a8:b5:45:1e:e4:aa:09:4e:79:26:b7:3c:aa: b0:9a:56:6c:65:81:5e:47:5a:12:96:28:f6:62:03: 39:83:22:c7:cf:3a:96:4f:ba:b1:02:09:bd:c7:89: 40:8a:c3:18:8a:44:78:2d:c1:86:d0:e0:c9:73:95: 7f:88:a7:77:b5:05:18:a6:89:9e:7b:4c:c2:4b:42: 55:64:83:05:5b:12:19:f8:e0:15:3d:ee:4d:89:7d: 05:d5:0b:b9:94:10:e9:69:f3:b2:b5:e8:d5:e8:5a: b6:49:06:8c:8d:d3:20:a1:76:ec:31:99:38:d1:ea: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C3:30:38:5D:2E:03:55:1A:EF:C8:E0:E9:65:A6:2F:85:FE:B6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e21594f0-8c43-3019-b67e-05291f512ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1a:4d:c8:ff:1d:eb:17:ab:0d:ba:e3:56:3a:22:26:17:cc: 51:5e:53:76:ed:fd:46:c3:56:40:6c:e8:4e:81:00:b5:00:ca: 4a:ff:a9:98:bd:3e:0e:88:53:aa:5c:47:e7:75:9e:1a:3f:38: 09:ca:80:c2:29:03:e0:ed:0e:de:83:ca:e3:a6:2a:d5:7b:8c: da:a2:31:63:42:95:86:41:d8:e6:04:e6:5d:35:f2:58:d5:90: e1:8d:6a:c3:ae:e4:2c:48:c7:70:7c:e6:0b:09:db:f1:e3:6e: 9b:5d:8f:18:af:ee:15:ad:89:5e:60:62:40:6d:ac:00:a6:b6: 9b:69:40:ef:32:0e:f3:01:c5:b1:7a:8c:6e:b4:58:7a:d5:ba: a7:45:f1:61:fa:7a:52:58:a9:84:05:ca:0f:4b:b1:5d:eb:cd: ff:6a:1b:4d:2e:d6:87:f0:35:60:52:fe:27:02:42:8f:55:e8: 2f:5a:c5:36:7a:74:52:e7:51:2e:a5:c9:89:a1:93:29:3d:c0: a9:37:82:05:44:a4:ab:e9:44:61:a3:57:eb:46:a1:6a:f5:82: bb:e2:0a:6e:c0:ac:12:bc:d5:9b:c6:7c:d5:8c:61:b8:a7:af: 1b:c1:af:59:16:c8:09:fb:c9:2e:aa:cb:a9:fe:d1:54:8f:1d: ac:85:7c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWu8Ef0Wydf3VEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmQ4OThhMmMtYWRmNS00ZDhkLTkwOWEtOGNlMWFiZmMxNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LO5ZDoJTwBQSZOeuLv8FPNTozgJVJRA9Te2 Il1IUghb6fsGM1+4BPy+2cbEnVk+Jsp6lwQWv0PJhi5V7F0OvAUc+45smM6tZ2Hi 0IkrYxbMb6xgExlqYEjqRhCyThfhYA6AQklz0m1GnCYnrRNTS5IiRyROj1uZmYGN 6gXiBg+Q5RiKn7A0OKi1RR7kqglOeSa3PKqwmlZsZYFeR1oSlij2YgM5gyLHzzqW T7qxAgm9x4lAisMYikR4LcGG0ODJc5V/iKd3tQUYpomee0zCS0JVZIMFWxIZ+OAV Pe5NiX0F1Qu5lBDpafOytejV6Fq2SQaMjdMgoXbsMZk40eqY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLDMDhdLgNVGu/I4Ollpi+F/rYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTIxNTk0ZjAtOGM0My0z MDE5LWI2N2UtMDUyOTFmNTEyYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoaTcj/HesXqw2641Y6IiYXzFFeU3bt/UbDVkBs6E6BALUAykr/qZi9 Pg6IU6pcR+d1nho/OAnKgMIpA+DtDt6DyuOmKtV7jNqiMWNClYZB2OYE5l018ljV kOGNasOu5CxIx3B85gsJ2/Hjbptdjxiv7hWtiV5gYkBtrACmtptpQO8yDvMBxbF6 jG60WHrVuqdF8WH6elJYqYQFyg9LsV3rzf9qG00u1ofwNWBS/icCQo9V6C9axTZ6 dFLnUS6lyYmhkyk9wKk3ggVEpKvpRGGjV+tGoWr1grviCm7ArBK81ZvGfNWMYbin rxvBr1kWyAn7yS6qy6n+0VSPHayFfCE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:53 2025 by rpki-client